Incorrect conformance tool behavior for U2F1.1/1.2 - MDS3

[Ujjwal Roy]

Conformance tool is sending incorrect INS for U2F authenticate command if credential length is high and command is sent in chaining.

Below is the conformance tool trace

Register -:
Command ->
0001000040f540188e3459d40d07c7178655dc3efdf2412638834bfc1cb76a3a07ebc4548a2d991bff749f40f0208951796180a4d2ccb5dd41ea8c8e737a821cef7eee1d6800

Response ->
050481a7c17042d45dbf30e5304a4a289959c28c938174f633e5fd0ebecd5fb5c2a8c8fa24b94bec4cd06337395020006bf273f2951f52e33800da4cf9a28fc5ce1bc04811e57dd6394dff9953fd51c216efc007ee7c3344f34869571cd6cd044e80f134ed6a745b79c28a29e996311dd009d3fadeecbf00e3dae2e45d466007cb4e6f77af4042f8f08d2c425eca845ce043858278e3bd9d6cb18d4f5da523b32fb34d1533ca9ea9507fc5124d0efa640fa1c97d6848cef9ace41eeb2d45f524c87e32b11c65eab3add4bb9bd28af8f8ab42fa62abd1ac05c54fea30e9613340d6f7fb72b35ba3c1c2ac19a57ce24df65a87c7bcf4800a74a4e7cf38185e3d6c6100

87490130820242308201e7a003020102020100300a06082a8648ce3d040302307d310b30090603550406130244453127302506035504030c1e496e66696e656f6e204649444f3220446576656c6f706d656e74204b69743121301f060355040a0c18496e66696e656f6e20546563686e6f6c6f6769657320414731223020060355040b0c1941757468656e74696361746f72204174746573746174696f6e301e170d3233303930363137323233355a170d3330303930353137323233355a307d310b30090603550406130244453127302506035504030c1e496e66696e656f6e204649444f3220446576656c6f706d656e74204b69743121301f060355040a0c6100

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

0030460221009754b1b3baf980bfc49de6ebb8e2c67c5a4451b504df59f9cf328372b15c6d9a022100fa01c3fad119a18075c8f17ac98dc557af772005787d7b7c2f20201d5e95806030440220547c29d1671c9ec0435db6ea234dde75994c73fe8513f0c6ab678862aa4117cd02201b2e3f4c562c60d78d3d550c9db389b7446e05196a4cd0da252195b6691f24ba9000

Authenticate -:
Command ->
00c20300f02ac9b1d84b8b82b46c2d8bfab3c47377ec6b330082536465b7474a6c8ae739cf2d991bff749f40f0208951796180a4d2ccb5dd41ea8c8e737a821cef7eee1d68c04811e57dd6394dff9953fd51c216efc007ee7c3344f34869571cd6cd044e80f134ed6a745b79c28a29e996311dd009d3fadeecbf00e3dae2e45d466007cb4e6f77af4042f8f08d2c425eca845ce043858278e3bd9d6cb18d4f5da523b32fb34d1533ca9ea9507fc5124d0efa640fa1c97d6848cef9ace41eeb2d45f524c87e32b11c65eab3add4bb9bd28af8f8ab42fa62abd1ac05c54fea30e9613340d6f7fb72b35ba3c1c2ac19a57ce24df65a8700
Response ->

6D00
Command ->
0002030011c7bcf4800a74a4e7cf38185e3d6c87490100

Authenticator first chaining command(  00 c2 03 00 .....) should go with different CLA and INS.

There is no information on c2 INS in U2F specification (https://fidoalliance.org/specs/fido-u2f-v1.2-ps-20170411/fido-u2f-raw-message-formats-v1.2-ps-20170411.html#:~:text=Request%20messages%20are%20created%20by,undergo%20various%20transformations%20and%20encodings.)